Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/rds: fixed the possible null dereference of cp The cp parameter may be null. Calling cp-cpconn would result in a null dereference. Simon Horman adds: Analysis: cp is a parameter of rdsrdmamap, and it is not reassigned. The...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate the virtual address and size of the userq buffer. It is necessary to validate the virtual address of the userq object to determine whether it is resident in a valid vm mapping...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: TCP: fixed page frag corruption upon a page fault. Steffen reported a corruption of the TCP stream for HTTP requests served by the Apache web-server, using a CIFS mount-point and the corresponding file’s memory mapping. The root...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

Guests running on Arm can cause Denial of Service DoS attacks on Dom0 through PV devices. When mapping memory pages of guests on Arm, Dom0 uses an rbtree to keep track of the foreign mappings. The update of this rbtree does not always occur completely with the relevant lock held, resulting in a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: crypto: qat – fix DMA transfer direction When CONFIGDMAAPIDEBUG is enabled, during the execution of the crypto self-test for QAT crypto algorithms, the function adddmaentry reports a warning indicating that overlapping mapping...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: fix ofiomap leak Smatch reports: drivers/regulator/stm32-pwr.c:166 stm32pwrregulatorprobe warn: ‘base’ from ofiomap not released on lines: 151,166. In stm32pwrregulatorprobe, base is not released when...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4668-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4668-1 advisory. The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: -...

ios-malicious-bithunter

iOS Malicious Bit Hunter Resumen iOS Malicious Bit Hunter es un motor de detección de complementos maliciosos para aplicaciones iOS. Puede analizar el encabezado del archivo macho de la biblioteca dinámica dylib inyectada basándose en el tiempo de ejecución, y puede realizar análisis de...

CVE-2026-98216

A flaw was found in the Linux kernel's InfiniBand hfi1 driver. Incorrect memory offset calculations and Direct Memory Access DMA buffer handling during credit-return memory mapping can lead to corrupted page tables or communication stalls. A local user with access to the hfi1 device could exploit...

CVE-2026-98224

A flaw was found in the Linux kernel's memory management subsystem. A local user could cause a Denial of Service DoS by triggering a failure during a memory mapping preparation operation. Because the kernel fails to properly release accounted memory when this operation fails, repeated triggers ca...

CVE-2026-98216

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIOCRED credit-return mmap hfi1filemmap's PIOCRED case must hand user space the single credit-return page that holds this context's entry. That page is the second or third page of the per-node credit-return...

EUVD-2026-93144

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIOCRED credit-return mmap hfi1filemmap's PIOCRED case must hand user space the single credit-return page that holds this context's entry. That page is the second or third page of the per-node credit-return...

CVE-2026-98216: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIOCRED credit-return mmap hfi1filemmap's PIOCRED case must hand user space the single credit-return page that holds this context's entry. That page is the second or third page of the per-node credit-return...

CVE-2026-47491

A flaw was found in nvidia-driver. A local unprivileged attacker can trigger the improper release of memory resources in the kernel mode layer, leaving a memory mapping accessible after the underlying memory is reused. A successful exploit could allow an attacker to achieve privilege escalation,...

CVE-2026-102820

pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to talk to a running Pageant instance. Prior to pageant 0.2.3, the Windows pageant crate's pageant/src/wmmessage.rs MemoryMap::read function trusts a peer-controlled u32 response length supplied...

PT-2026-102804

Name of the Vulnerable Software and Affected Versions pageant versions prior to 0.2.3 Description The MemoryMap::read function in the pageant/src/wmmessage.rs file trusts a peer-controlled u32 response length provided via the 8192-byte shared-memory mapping accessed by AgentClient::connect pagean...

CVE-2026-98140

A flaw was found in the Linux kernel's NTFS file system. A local user could trigger this vulnerability during error handling in Master File Table MFT write operations, where temporary kernel memory mappings fail to be released properly. Because these local memory mappings require strict ordering,...

CVE-2026-97931 ALSA: us122l: Prevent write upgrades for read mappings

In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Prevent write upgrades for read mappings The hwdep mmap callback rejects read-buffer mappings that are initially writable, but leaves VMMAYWRITE set on mappings created with PROTREAD. A process that can open the hwd...

CVE-2026-97912: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM size is 0 on mapping failure On a mapping failure of the SRAM, the SRAM size is left as non-zero. The probe will succeed as the error return is not checked since having SRAM is not a hard requirement. T...

SUSE CVE-2026-90341

In the Linux kernel, the following vulnerability has been resolved: firmware: coreboot: Validate table bounds The existing coreboottablepopulate bounds checks limit individual entries to the mapped length. However, coreboottableprobe replaces the platform resource length with header and table siz...